X-Recipient:	archive-cygwin AT delorie DOT com
X-SWARE-Spam-Status:	No, hits=-2.1 required=5.0 tests=AWL,BAYES_00
X-Spam-Check-By:	sourceware.org
Message-ID:	<49FA24BF.4000407@free.fr>
Date:	Fri, 01 May 2009 00:22:55 +0200
From:	Sylvain RICHARD <sr75pro AT free DOT fr>
User-Agent:	Thunderbird 2.0.0.18 (Windows/20081105)
MIME-Version:	1.0
To:	Tim McDaniel <tmcd AT panix DOT com>, The Cygwin Mailing List <cygwin AT cygwin DOT com>
Subject:	Re: I'd like to have an unreadable file
References:	<Pine DOT NEB DOT 4 DOT 64 DOT 0904301620510 DOT 20542 AT panix2 DOT panix DOT com>
In-Reply-To:	<Pine.NEB.4.64.0904301620510.20542@panix2.panix.com>
X-IsSubscribed:	yes
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com

Tim McDaniel wrote:
> I'd like to test a script by giving it an unreadable file as an
> argument.
>
> I usually log in as a user, but one that's in the Administrators
> group.  I made the file (a text file containing just "hello") owned by
> user Administrator with absolutely no permissions for anyone else.
Cygwin uses a little-known aspect of the NT security model. Besides 
permissions, there are also privileges. And administrators have the 
backup/restore privilege enabled by default, which means that they can 
bypass ACLs (access control lists). [1]

Try with a standard user, not a members of the administrator's group.

[1] You can use the editrights cygwin utility to manipulate privilieges. 
For example, editrights.exe -l -u Administrateurs should list 
SeBackupPrivilege and SeRestorePrivilege among others. And you inherit 
these privilieges from group membership.

-- 
Sylvain RICHARD


--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

- Raw text -